photos-new: bounce /library/* to / after OIDC

Caddyfile

@@ -157,8 +157,12 @@ photos-new.hubris.network {
 	}
 	encode zstd gzip
 	# PhotoPrism API + OIDC callback first (matched before Vite catch-all)
-	@pp path /api/v1/* /api/v1 /static/* /library/* /share/*
+	@pp path /api/v1/* /api/v1 /static/* /share/*
 	reverse_proxy @pp 192.168.8.181:2342
+	# PhotoPrism redirects to /library/browse after OIDC. Bounce
+	# back to the SvelteKit UI; mule-image is the only frontend.
+	redir /library /  302
+	redir /library/* / 302
 	# Sidecar (mule-sidecar Go service) — keeps the /api/sidecar/ prefix
 	@sc path /api/sidecar/*
 	reverse_proxy @sc 192.168.8.181:8000